16 matches found
CVE-2026-90781-alsa-lib-oob
CVE-2026-90781 — alsa-lib 境界外書き込み再現プログラム CVE-2026-90781 のスタンドアロン C 再現プログラムです。これは alsa-lib の sndctlasciielemidparse において、name=（引用符付きおよび引用符なしの両形式）を解析する際に発生する 1 バイトの境界外書き込みです。 脆弱性 src/control/ctlparse.c（v1.2.16.1 およびそれ以前の開発 HEAD）において： root@kitploit: char buf64; ... if size intsizeofbuf // BUG: allow...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mac80211: Verify that the extended element ID is present. Before attempting to parse an extended element, ensure that the extended element ID is present...
CVE-2026-68402 wifi: cfg80211: bound element ID read when checking non-inheritance
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211iselementinherited reads the first data octet of the candidate element id = elem-data0 to look it up in an extension non-inheritance list. It does so aft...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986932)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986932 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element,...
EUVD-2024-41266
Malicious code in bioql PyPI...
CVE-2024-45558
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length...
CVE-2024-45558
The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...
CVE-2021-47611
In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present...
UBUNTU-CVE-2021-47611
In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present...
CVE-2021-47611
CVE-2021-47611 concerns the Linux kernel mac80211 code, where parsing of an extended element could proceed without verifying that the extended element ID is present. The CVE is described in multiple connected sources as resolved by a kernel fix: the code now validates the presence of the extended...
CVE-2021-47611 mac80211: validate extended element ID is present
In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present...
CVE-2021-47611: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present...
GSD-2021-1002725 mac80211: validate extended element ID is present
mac80211: validate extended element ID is present This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
GSD-2021-1002688 mac80211: validate extended element ID is present
mac80211: validate extended element ID is present This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
Microsoft Internet Explorer Element ID Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...